Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A618B/9BA2B254803F11EA97B43D62C4F9AE02/aWkfVRZJUvL08f7oBKoVg1_-htU.mft
File:                     aWkfVRZJUvL08f7oBKoVg1_-htU.mft (raw, json)
Hash identifier:          tIpDVwg/PWCClZHMCp5TgSN2hrpJ5uWbCbqhCH0887M=
Subject key identifier:   DA:AE:2C:E5:6E:48:D9:33:1A:11:D4:F6:A0:A2:06:49:DC:35:8E:26
Authority key identifier: 69:69:1F:55:16:49:52:F2:F4:F1:FE:E8:04:AA:15:83:5F:FE:86:D5
Certificate issuer:       /CN=A91A618B/serialNumber=69691F55164952F2F4F1FEE804AA15835FFE86D5
Certificate serial:       0A5B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWkfVRZJUvL08f7oBKoVg1_-htU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A618B/9BA2B254803F11EA97B43D62C4F9AE02/aWkfVRZJUvL08f7oBKoVg1_-htU.mft
Manifest number:          0A55
Signing time:             Sat 28 Feb 2026 19:53:27 +0000
Manifest this update:     Sat 28 Feb 2026 19:53:26 +0000
Manifest next update:     Sat 07 Mar 2026 19:53:26 +0000
Files and hashes:         1: aWkfVRZJUvL08f7oBKoVg1_-htU.crl (hash: 2BD+o2A2W9EJlNFf17Sgdt4LgBwNgKz2BmoBjaPIEZw=)
                          2: 594ECE96804011EA9B73BC62C4F9AE02.roa (hash: EKd9VQ360ebUJ8WlZXHE7k1r87p0QtlOPC8jxoN1cJc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A618B/9BA2B254803F11EA97B43D62C4F9AE02/aWkfVRZJUvL08f7oBKoVg1_-htU.crl
                          rsync://rpki.apnic.net/member_repository/A91A618B/9BA2B254803F11EA97B43D62C4F9AE02/aWkfVRZJUvL08f7oBKoVg1_-htU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWkfVRZJUvL08f7oBKoVg1_-htU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 19:53:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2651 (0xa5b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A618B, serialNumber=69691F55164952F2F4F1FEE804AA15835FFE86D5
        Validity
            Not Before: Feb 28 19:53:26 2026 GMT
            Not After : Mar  7 19:53:26 2026 GMT
        Subject: CN=69a347b7-12eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:87:0d:da:71:f9:58:7f:de:84:73:9d:e8:4c:
                    33:e0:0d:d2:4c:7b:14:47:cc:54:b6:cd:b0:df:f3:
                    08:e4:01:f7:13:30:6e:09:d5:1a:81:1e:b4:be:06:
                    c9:c9:7d:b3:be:2c:85:80:a1:3c:70:2e:05:b3:4a:
                    41:f5:28:f0:96:b6:b9:b4:00:b3:e6:3e:d7:47:bd:
                    67:38:a3:b1:94:db:4f:0b:97:9d:5a:b0:7f:6d:ee:
                    a1:04:84:f4:5a:21:c0:6a:18:12:38:d0:86:3d:28:
                    58:5d:99:62:56:53:ce:e0:30:7c:55:c3:87:75:a5:
                    74:8e:aa:ca:51:a9:59:0f:be:61:2b:2d:a8:26:74:
                    c8:c8:85:be:fb:37:e8:c8:0c:16:87:a0:ec:f5:ce:
                    2c:d3:79:b3:40:73:03:30:9d:3d:a8:12:f5:2c:e1:
                    ca:8b:8e:0e:91:b7:09:a1:19:bc:a9:52:2f:61:58:
                    33:76:b8:96:21:59:f5:fe:e2:1a:a4:1b:29:94:21:
                    83:29:9c:40:49:f2:29:ee:59:c4:f2:38:91:2d:ba:
                    91:74:be:e4:88:7f:59:bb:59:d5:81:a1:8b:22:94:
                    f6:6a:1d:74:30:c0:36:74:85:84:62:29:83:da:07:
                    9e:e6:f7:9b:95:ef:93:17:6b:11:3b:6f:dc:8a:7d:
                    89:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:AE:2C:E5:6E:48:D9:33:1A:11:D4:F6:A0:A2:06:49:DC:35:8E:26
            X509v3 Authority Key Identifier:
                keyid:69:69:1F:55:16:49:52:F2:F4:F1:FE:E8:04:AA:15:83:5F:FE:86:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A618B/9BA2B254803F11EA97B43D62C4F9AE02/aWkfVRZJUvL08f7oBKoVg1_-htU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWkfVRZJUvL08f7oBKoVg1_-htU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A618B/9BA2B254803F11EA97B43D62C4F9AE02/aWkfVRZJUvL08f7oBKoVg1_-htU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:b2:72:76:3a:67:12:fe:a7:b2:15:aa:9c:19:fa:7b:02:00:
         0e:41:4a:d5:9a:62:74:04:9d:ba:cb:c5:6a:40:ac:a4:77:58:
         35:7c:5d:0a:d1:2f:64:2d:50:2c:39:e6:e8:53:20:71:a9:9e:
         16:92:d4:f0:fc:d5:96:9b:e6:4f:a7:5b:00:64:76:69:72:63:
         ea:37:d0:1f:1e:54:ac:5e:ae:57:b3:ac:c8:96:0f:5f:0c:10:
         da:0d:f8:10:fe:26:c2:2f:29:5a:cd:94:73:9a:53:93:ce:e0:
         f1:13:ea:1e:bb:4d:03:75:ac:4e:96:1b:8a:a4:f7:ae:ef:fe:
         01:9b:f9:b7:57:a8:ff:35:a4:0f:19:de:9a:21:00:50:4d:7c:
         ea:6e:71:46:8f:33:4c:3f:38:74:a9:d4:3e:9a:03:1a:81:b0:
         f0:b0:94:4b:ec:40:ac:f8:74:80:e6:6e:b6:f2:6b:e4:6a:bd:
         a6:c8:e5:67:ba:61:15:45:fc:97:b6:99:08:47:2d:3c:8c:55:
         8d:af:32:7f:b6:c4:f7:c8:f3:49:a1:46:9d:1f:03:68:e8:b6:
         5c:4e:f1:dc:29:d2:fe:19:d0:f3:75:c5:9c:96:2d:07:cd:7c:
         21:25:37:ed:cf:03:96:85:40:0b:d3:3b:9e:56:08:7c:70:f1:
         92:62:de:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:51:04 2026 by rpki-client